ArcSight SIEM Integration Expert

The ArcSight SIEM Integration Expert is responsible for the end-to-end integration of log sources into the ArcSight Security Information and Event Management (SIEM) platform. This role requires deep expertise in ArcSight architecture and components, with a strong focus on onboarding logs from new systems, log normalization, and developing alert rules to detect potential security threats.

Key Responsibilities include:

• Acting as a subject matter expert on ArcSight SIEM, including configuration, management, and optimization.
• Onboarding and integrating log sources from various systems and platforms into ArcSight.
• Normalizing and parsing log data to ensure consistency and usability within the SIEM environment.
• Developing and fine-tuning correlation and alert rules to detect suspicious activities and potential security incidents.
• Collaborating with IT and security teams to understand log requirements and ensure comprehensive security monitoring.
• Providing support for troubleshooting, incident response, and continuous improvement of SIEM use cases.

Key Skills:

• Deep technical expertise with ArcSight SIEM architecture and components (ESM, Connectors, Logger, etc.).
• Hands-on experience integrating and parsing logs from diverse systems.
• Strong knowledge of log normalization, event correlation, and rule development.
• Familiarity with threat detection techniques and security best practices.

Location: Dubai, United Arab Emirates
Work Conditions: On-site, Full-time
Language Requirements: Not specified.